JP2009135688A - Authentication method, authentication system, and on-vehicle device - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To simply perform pairing between communication devices while preventing unjust access by a third person. <P>SOLUTION: An authentication system is composed so that: an on-vehicle device generates an authentication key and displays, on a display, a two-dimensional code including the generated authentication key and URL indicating a predetermined WEB page on the network; a mobile terminal device reads the two-dimensional code via an imaging unit so as to obtain the authentication key and the URL from the two-dimensional code and downloads a communication program for communicating with the on-vehicle device from a WEB page relating to the URL; and the downloaded communication program is operated so as to transmit the authentication key to the on-vehicle device. <P>COPYRIGHT: (C)2009,JPO&INPIT

Description

  The present invention relates to an authentication method, an authentication system, and an in-vehicle device that mutually authenticate each other by exchanging an authentication key when connecting a communication device and a mobile terminal device by communication, and in particular, preventing unauthorized access by a third party. In addition, the present invention relates to an authentication method and an authentication system that can easily perform pairing between communication devices.

  In recent years, car navigation systems have become widespread, and it has become common for automobiles to be equipped with in-vehicle devices capable of viewing music and video, displaying navigation information, and the like. Further, such an in-vehicle device communicates with a mobile terminal device such as a mobile phone or a PDA (Personal Digital Assistant) carried by a passenger, and transmits and receives data between the mobile terminal device and the in-vehicle device.

  Thus, when communicating between communication devices, a wireless communication standard called Bluetooth (registered trademark) is well known. Bluetooth (registered trademark) is a wireless communication standard that uses a frequency band of 2.4 GHz, and wireless communication within a radius of several tens of meters is possible. At the start of communication, communication devices mutually authenticate each other device by exchanging, for example, the same authentication key called a PIN (Personal Identity Number) code. Note that such authentication processing performed at the start of communication is called “pairing” of communication devices.

  In this pairing, for example, the in-vehicle device displays the PIN code on the display, the user manually inputs the displayed PIN code to the mobile terminal device, and the mobile terminal device transmits the manually input PIN code to the in-vehicle device. It is done by doing.

  However, manual input of the PIN code is troublesome for the user. For this reason, attempts have been made to improve user convenience by omitting the input of the PIN code. For example, in Patent Document 1, an infrared communication unit provided separately from the Bluetooth (registered trademark) communication unit is provided in each communication device, and a PIN code is transmitted via the infrared communication unit when a user performs a switch operation. A method of exchanging is disclosed.

JP 2007-73565 A

  However, although the technique of Patent Document 1 does not require manual input of a PIN code, the PIN code is exchanged by infrared communication, which may cause a security problem. For example, when an in-vehicle device is accessed from outside the vehicle via a window glass, a service provided by the in-vehicle device to a third party outside the vehicle may be used without permission.

  Although it is conceivable to use fixed data such as “0000” as the PIN code in order to omit the manual input of the PIN code, there is a possibility that it may be connected to the in-vehicle device without a third party outside the vehicle. Since it becomes high, it is not preferable from the viewpoint of security.

  For these reasons, it has become a major issue how to easily perform pairing between communication devices while preventing unauthorized access by a third party.

  The present invention has been made to solve the above-described problems caused by the prior art, and an authentication method and authentication that can easily perform pairing between communication devices while preventing unauthorized access by a third party. An object is to provide a system and an in-vehicle device.

  In order to solve the above-described problems and achieve the object, the present invention provides an authentication method for performing mutual authentication by exchanging an authentication key when a communication device and a mobile terminal device are connected by communication. A generating step in which the device generates the authentication key; a display step in which the communication device displays the two-dimensional code including the authentication key generated in the generating step; An acquisition step of acquiring the authentication key from the two-dimensional code by reading the two-dimensional code via the transmission, and a transmission in which the mobile terminal device transmits the authentication key acquired by the authentication key acquisition step to the communication device And a process.

  The present invention also provides an authentication method for mutually authenticating by exchanging an authentication key when a communication device and a mobile terminal device are connected by communication, wherein the communication device generates the authentication key; A display step in which the communication device displays a two-dimensional code including the authentication key generated in the generation step and a URL pointing to a predetermined WEB page on the network on the display unit; An acquisition step of acquiring the authentication key and the URL from the two-dimensional code by reading the two-dimensional code, and communication for the mobile terminal device to communicate with the communication device from the WEB page related to the URL Download process for downloading the program, and before downloading to the mobile terminal device by the download process Communication program is characterized in that which includes a transmission step of transmitting the authentication key to the communication device.

  The present invention also provides an authentication system that mutually authenticates by exchanging an authentication key when a communication device and a mobile terminal device are connected by communication, wherein the communication device generates the authentication key. And a display unit that displays a two-dimensional code including the authentication key generated by the generating unit on a display unit, and the portable terminal device reads the two-dimensional code via the imaging unit, An acquisition unit that acquires the authentication key from a two-dimensional code, and a transmission unit that transmits the authentication key acquired by the acquisition unit to the communication device.

  Further, the present invention provides an in-vehicle device that performs authentication by exchanging an authentication key when connecting to a mobile terminal device by communication, the generating unit that generates the authentication key, and the authentication generated by the generating unit And a display means for displaying a two-dimensional code including a key on a display unit.

  According to the present invention, the communication device generates the authentication key, displays a two-dimensional code including the generated authentication key on the display unit, and the mobile terminal device reads the two-dimensional code via the imaging unit. Since the authentication system is configured to acquire the authentication key from the two-dimensional code and send the acquired authentication key to the communication device, it is illegal for a third party to use a two-dimensional code that is difficult to focus from a distance. It is possible to easily perform pairing between communication devices by preventing manual access and omitting manual input of an authentication key. Accordingly, for example, when the communication device is mounted on a vehicle, it is difficult to obtain a two-dimensional code from the outside of the vehicle, and thus it is possible to prevent an authentication key from being illegally obtained.

  According to the present invention, the communication device generates an authentication key, displays a two-dimensional code including the generated authentication key and a URL pointing to a predetermined WEB page on the network on the display unit, and the mobile terminal device An authentication key and URL are acquired from the two-dimensional code by reading the two-dimensional code through the imaging unit, a communication program for communicating with the communication device is downloaded from the WEB page related to the URL, and the downloaded communication program is authenticated. Since the authentication system is configured to transmit the key to the communication device, pairing between communication devices can be easily performed by eliminating the manual input of the authentication key while preventing unauthorized access by a third party. There is an effect. In addition, since the communication program downloaded on the mobile terminal device communicates with the communication device, the configuration of the mobile terminal device can be simplified, and the change of the communication method can be easily handled. There is an effect.

  Exemplary embodiments of an authentication method and an authentication system according to the present invention will be described below in detail with reference to the accompanying drawings. In the first embodiment, an authentication system including an in-vehicle device mounted on a car, a mobile terminal device carried by a passenger, and a server device connected to the mobile terminal device via a network is described. Each of the authentication systems in which is omitted will be described.

  In each embodiment, a case where a mobile phone is used as the mobile terminal device will be described. However, a portable terminal device such as a PDA (Personal Digital Assistant) or a notebook personal computer may be used. In each embodiment, a case where the communication device to be paired with the mobile terminal is an in-vehicle device mounted on a vehicle will be described, but an electronic device installed indoors or the like may be used.

  FIG. 1 is a diagram illustrating an overview of an authentication system 1 according to the first embodiment. As shown in FIG. 1, the authentication system 1 according to the first embodiment includes an in-vehicle device 10 mounted on a vehicle, a mobile terminal device 20 carried by a passenger, and a server device connected to the mobile terminal device 20 via a network. 30. The figure also shows a “pairing” procedure that is performed when the in-vehicle device 10 and the mobile terminal device 20 establish communication using Bluetooth (registered trademark).

  As described above, in order to perform communication using Bluetooth (registered trademark), it is necessary to mutually authenticate the partner device by exchanging the same authentication key called a PIN (Personal Identity Number) code between the communication devices. There is. However, conventionally, a PIN code is exchanged by a user manually inputting a PIN code displayed on a display or the like.

  However, since manual input of the PIN code is troublesome for the user, attempts have been made to omit manual input. For example, a method of omitting manual input as PIN data such as “0000” or exchanging the PIN code by infrared communication is conventionally known.

  However, the PIN code is exchanged at the start of communication in order to prevent unauthorized connection by an unauthorized third party who has intercepted the radio. Therefore, if the PIN code is fixed data or is exchanged by infrared communication, the chance of unauthorized connection by a third party is increased. In particular, since the in-vehicle device 10 shown in FIG. 1 is mounted on a vehicle, the risk of unauthorized connection is higher than when it is used indoors.

  Therefore, in the authentication system 1 according to the first embodiment, the in-vehicle device 10 generates and displays a two-dimensional code including the PIN code, and the mobile terminal device 20 that reads the two-dimensional code uses the read two-dimensional code. It was decided to obtain a PIN code. In this way, unauthorized access by a third party can be prevented without forcing the user to manually enter a PIN code.

  Specifically, the in-vehicle device 10 generates a PIN code (see (1) in FIG. 1), and a QR including a generated PIN code and a URL (Uniform Resource Locator) indicating the address of a Web page provided in the server device 30. A code (registered trademark) is generated, and the generated QR code (registered trademark) is displayed (see (2) in FIG. 1).

  Subsequently, the mobile terminal device 20 reads the QR code (registered trademark) displayed on the in-vehicle device 10 and acquires the PIN code and the URL from the read QR code (registered trademark). Then, the mobile terminal device 20 sets the PIN code as a URL argument (performs URL encoding), accesses the server device 30 (see (3) in FIG. 1), and performs communication with the in-vehicle device 10. An application program (hereinafter referred to as “communication application”) is downloaded (see (5) in FIG. 1). In this communication application, the PIN code notified to the server device 30 is set.

  Then, the communication application downloaded to the mobile terminal device 20 transmits the PIN code set to itself to the in-vehicle device 10 (see (6) in FIG. 1), and the in-vehicle device 10 that has received the PIN code has received it. An authentication process for determining whether or not the PIN code matches the PIN code generated in (1) of FIG. 1 is executed (see (7) of FIG. 1). In each embodiment, a case where a QR code (registered trademark) is used as a two-dimensional code will be described, but another two-dimensional code may be used.

  Next, configurations of the in-vehicle device 10, the mobile terminal device 20, and the server device 30 according to the first embodiment will be described. FIG. 2 is a block diagram illustrating configurations of the in-vehicle device 10, the mobile terminal device 20, and the server device 30 according to the first embodiment. In the figure, only components necessary for explaining the features of the authentication system 1 according to the first embodiment are shown.

  First, the configuration of the in-vehicle device 10 will be described. As shown in the figure, the in-vehicle device 10 includes a display unit 11, a BT (Bluetooth) communication unit 12, a control unit 13, and a storage unit 14. The control unit 13 further includes a PIN code generation unit 13a, a two-dimensional code generation unit 13b, a PIN code reception unit 13c, and an authentication unit 13d, and the storage unit 14 includes a PIN code 14a, a pair The ring information 14b is stored.

  The display unit 11 is a display device such as a touch panel display, and is used to display a generated QR code (registered trademark). The display unit 11 displays a button operated by the user when communication between the mobile terminal device 20 and the in-vehicle device 10 is started.

  The BT communication unit 12 is a communication device that performs communication based on Bluetooth (registered trademark). The BT communication unit 12 may automatically permit the second and subsequent connections for the paired communication device based on the pairing information 14b that is information on the communication device that has been paired. it can. However, when security is more important, automatic connection permission may not be given to a paired communication device. In this case, the in-vehicle device 10 requests the mobile terminal device 20 to read a QR code each time the mobile device 10 is connected to the mobile terminal device 20.

  The control unit 13 generates a two-dimensional code including the generated PIN code and displays the two-dimensional code on the display unit 11, and compares the generated PIN code with the PIN code received from the mobile terminal device 20 for connection. It is a processing unit that performs a process of determining whether or not it is possible.

  The PIN code generation unit 13a is a processing unit that generates a PIN code having a random value when a connection request from the mobile terminal device 12 is detected. The PIN code generation unit 13a is also a processing unit that stores the generated PIN code in the storage unit 14 as the PIN code 14a, and performs processing to pass to the two-dimensional code generation unit 13b.

  The two-dimensional code generation unit 13b is a processing unit that performs a process of generating a QR code including the PIN code received from the PIN code generation unit 13a and a URL indicating the address of the Web page included in the server device 30. The two-dimensional code generation unit 13b also performs processing for displaying the generated QR code on the display unit 11.

  The PIN code receiving unit 13 c is a processing unit that performs a process of receiving a PIN code from the mobile terminal device 20 via the BT communication unit 12. The PIN code receiving unit 13c also performs a process of passing the received PIN code to the authentication unit 13d.

  The authentication unit 13d performs processing for permitting communication with the mobile terminal device 20 on condition that the PIN code 14a stored in the storage unit 14 and the PIN code received by the PIN code receiving unit 13c are the same. Part. The authentication unit 13d is also a processing unit that performs a process of adding device information about the mobile terminal device 20 that has permitted communication to the pairing information 14b.

  The storage unit 14 is a storage unit configured by a storage device such as an HDD (Hard Disk Drive) or a nonvolatile RAM (Random Access Memory). The PIN code 14a is a PIN code generated by the PIN code generation unit 13a, and the pairing information 14b is information in which device information related to a communication device for which pairing has been completed is accumulated. The pairing information 14b includes items such as a device address, a device name, a device type, and a PIN code.

  Next, the configuration of the mobile terminal device 20 will be described. As shown in the figure, the mobile terminal device 20 includes an imaging unit 21, a BT communication unit 22, a control unit 23, and a communication unit 24. The control unit 23 further includes a two-dimensional code reading unit 23a, a download unit 23b, and an application execution unit 23c. In addition, although the memory | storage part is not shown in the figure, the portable terminal device 20 shall be provided with the memory | storage part which memorize | stores the downloaded communication application etc.

  The imaging unit 21 is an imaging device such as a camera that captures a QR code (registered trademark) displayed on the display unit 11 of the in-vehicle device 10. The QR code (registered trademark) imaged by the imaging unit 21 is transferred to the two-dimensional code reading unit 23 a of the control unit 23. The BT communication unit 22 is a communication device that performs communication using Bluetooth (registered trademark), and performs wireless communication with the BT communication unit 12 of the in-vehicle apparatus 10.

  The control unit 23 reads data such as a PIN code included in the QR code (registered trademark) imaged by the imaging unit 21, and downloads a communication application by accessing a web page on the server device 30 based on the read data. And it is a process part which performs the process which notifies PIN code with respect to the vehicle-mounted apparatus 30 by running the downloaded communication application.

  The two-dimensional code reading unit 23a receives the QR code (registered trademark) imaged by the imaging unit 21, and acquires the PIN code and the URL indicating the address of the Web page provided in the server device 30 from the received QR code (registered trademark). It is a processing part which performs processing to perform. The two-dimensional code reading unit 23a also performs a process of passing the acquired PIN code and URL to the download 23b.

  The download unit 23b is a processing unit that performs processing for downloading a communication application by accessing a Web page included in the server device 30 based on the PIN code and URL received from the two-dimensional code reading unit 23a. Specifically, the PIN code is encoded in the URL received from the two-dimensional code reading unit 23a, and the Web page indicated by the URL is accessed.

  Although the case where the PIN code acquired by reading the QR code (registered trademark) is encoded into the URL and notified to the server device 30 has been described here, the PIN code may not be notified to the server device 30. For example, when the PIN code is stored in a storage unit (not shown) and the communication application downloaded from the server device 30 is executed, the application execution unit 23c may pass the stored PIN code to the communication application. Good.

  The application execution unit 23 c is a processing unit that performs processing for executing the communication application downloaded from the server device 30. The communication application executed by the application execution unit 23 c transmits the PIN code to the in-vehicle device 10 via the BT communication unit 22.

  The communication unit 24 is a communication device that performs wireless communication with the server device 30. The communication unit 24 is connected to a network such as the Internet via a base station and communicates with the server device 30 on the network.

  Next, the configuration of the server device 30 will be described. As shown in the figure, the server device 30 includes a communication unit 31, a control unit 32, and a storage unit 33. The control unit 32 further includes a download reception unit 32a, and the storage unit 33 stores the communication application 33a. The communication unit 31 includes a communication device such as a LAN (Local Area Network) card or a LAN board, and is used for communication with the mobile terminal device 20 via the network.

  The control unit 32 includes a download receiving unit 32a. The download receiving unit 32a receives a communication application download request from the mobile terminal device 20, and performs a process of acquiring a PIN code encoded in the URL related to the download request. . Then, the download receiving unit 32a sets the acquired PIN code in the communication application 33a read from the storage unit 33, and also performs a process of transmitting it to the mobile terminal device 20.

  The storage unit 33 is a storage unit configured by a storage device such as an HDD (Hard Disk Drive) or a nonvolatile RAM (Random Access Memory), and stores a communication application 32 a to be transmitted to the mobile terminal device 20. The communication application 32a is an application program executed by the application execution unit 23c of the mobile terminal device 20, and performs communication processing between the in-vehicle device 10 / the mobile terminal device 20.

  Next, a processing procedure performed by each device constituting the authentication system 1 according to the first embodiment will be described with reference to FIG. FIG. 3 is a flowchart illustrating the processing procedure of the authentication system 1 according to the first embodiment. As shown in the figure, the in-vehicle device 10 determines whether or not the initial setting SW (switch) displayed on the display unit 11 has been pressed (step S101). If the switch is not pressed (step S101, No) ), Wait for the switch to be pressed.

  If the switch is pressed (step S101, Yes), the PIN code generation unit 13a generates a PIN code (step S102), and the two-dimensional code generation unit 13b displays the PIN code and the Web page included in the server device 30. A QR code (registered trademark) including a URL indicating an address is generated (step S103) and displayed on the display unit 11 (step S104).

  The mobile terminal device 20 captures an image of the QR code (registered trademark) displayed on the display unit 11 of the in-vehicle device 10 by the user's operation (step S105), and the two-dimensional code reading unit 23a converts the QR code to the URL and PIN code. Is acquired (step S106). Then, the PIN code is encoded in the URL, and the connection destination indicated by the URL is accessed (step S107).

  When the server device 30 receives a download request from the mobile terminal device 20 (step S108), the server device 30 reads the corresponding communication app 33a from the storage unit 33, and sets the PIN code notified from the mobile terminal device 20 33a is transmitted to the portable terminal device 20 (step S109). And if the portable terminal device 20 downloaded the communication application (step S110), the application execution part 23c will execute the downloaded communication application, and the executed communication application will notify the in-vehicle device 10 of the PIN code. (Step S111).

  Subsequently, when the in-vehicle device 10 receives the PIN code from the mobile terminal device 20 (step S112), the authentication unit 13d determines whether or not the received PIN code matches the PIN code 14a in the storage unit 14. Is determined (step S113). If the PIN codes match (step S113, Yes), the device information related to the mobile terminal device 20 is additionally registered in the pairing information 14b (step S114), and the process ends. If the PIN codes do not match (No at step S113), the process ends without registering the device information.

  As described above, according to the first embodiment, the in-vehicle device generates an authentication key, and a two-dimensional code including the generated authentication key and a URL indicating a predetermined WEB page on the network is displayed on the display unit. Then, the mobile terminal device acquires the authentication key and URL from the two-dimensional code by reading the two-dimensional code via the imaging unit, and downloads and downloads a communication program for communicating with the in-vehicle device from the WEB page related to the URL. Since the authentication system is configured so that the authenticated communication program transmits the authentication key to the in-vehicle device, pairing between communication devices can be easily performed by eliminating the manual input of the authentication key while preventing unauthorized access by a third party. It can be performed. In addition, the communication terminal device can be simply configured by downloading the communication program from the server device.

  By the way, in the above-described first embodiment, an authentication system including an in-vehicle device mounted on a car, a mobile terminal device carried by a passenger, and a server device connected to the mobile terminal device via a network has been described. It is also possible to configure an authentication system without the above. Accordingly, in the second embodiment described below, an authentication system in which the server device is omitted will be described. In the second embodiment, the same components as those in the first embodiment are denoted by the same reference numerals, and the same contents as those in the first embodiment are not described or are simply described.

  FIG. 4 is a diagram illustrating an overview of the authentication system 1a according to the second embodiment. As shown in the figure, the in-vehicle device 10a generates a PIN code (see (1) in FIG. 4), generates a QR code (registered trademark) including the generated PIN code, and generates the generated QR code (registered trademark). ) Is displayed (see (2) in FIG. 4).

  Subsequently, the mobile terminal device 20a reads the QR code (registered trademark) displayed on the in-vehicle device 10a, and acquires the PIN code from the read QR code (registered trademark) (see (4) in FIG. 4). Then, the mobile terminal device 20a transmits the acquired PIN code to the in-vehicle device 10a (see (5) in FIG. 1), and the in-vehicle device 10a that has received the PIN code receives the received PIN code and FIG. An authentication process for determining whether or not the PIN code generated in (1) matches is executed (see (6) in FIG. 1).

  As described above, by omitting the server device 30 of the first embodiment, the authentication system can be configured more simply.

  Next, a processing procedure performed by each device constituting the authentication system 1a according to the second embodiment will be described with reference to FIG. FIG. 6 is a flowchart illustrating a processing procedure of the authentication system 1a according to the second embodiment. As shown in the figure, the in-vehicle device 10a determines whether or not the initial setting SW (switch) displayed on the display unit 11 has been pressed (step S201). If the switch is not pressed (step S201, No) ), Wait for the switch to be pressed.

  If the switch is pressed (step S201, Yes), the PIN code generator 13a generates a PIN code (step S202), and the two-dimensional code generator 13b includes a QR code (registered trademark) including the PIN code. Is generated (step S203) and displayed on the display unit 11 (step S204).

  The mobile terminal device 20 images the QR code (registered trademark) displayed on the display unit 11 of the in-vehicle device 10a by the user's operation (step S205), and the two-dimensional code reading unit 23a reads the QR code and obtains the PIN code. The unit 23d acquires a PIN code (step S206). Then, the PIN code transmitting unit 23e notifies the in-vehicle device 10a of the PIN code (Step S207).

  Subsequently, when the in-vehicle device 10a receives the PIN code from the mobile terminal device 20a (step S208), the authentication unit 13d determines whether or not the received PIN code matches the PIN code 14a in the storage unit 14. Is determined (step S209). If the PIN codes match (step S209, Yes), the device information related to the mobile terminal device 20a is additionally registered in the pairing information 14b (step S210), and the process ends. If the PIN codes do not match (No at step S209), the process ends without registering the device information.

  As described above, according to the second embodiment, the in-vehicle device generates the authentication key, displays the two-dimensional code including the generated authentication key on the display unit, and the mobile terminal device receives the two through the imaging unit. Since the authentication system is configured to acquire the authentication key from the two-dimensional code by reading the dimension code and to transmit the acquired authentication key to the in-vehicle device, a third party with a simpler system configuration than the first embodiment. It is possible to easily perform pairing between communication devices while preventing unauthorized access.

  As described above, the authentication method and authentication system according to the present invention are useful when it is desired to easily perform pairing between communication devices while preventing unauthorized access by a third party.

It is a figure which shows the outline | summary of the authentication system which concerns on Example 1. FIG. It is a block diagram which shows the structure of the vehicle-mounted apparatus which concerns on Example 1, a portable terminal device, and a server apparatus. 3 is a flowchart illustrating a processing procedure of the authentication system according to the first embodiment. It is a figure which shows the outline | summary of the authentication system which concerns on Example 2. FIG. It is a block diagram which shows the structure of the vehicle-mounted apparatus and portable terminal device which concern on Example 2. FIG. 10 is a flowchart illustrating a processing procedure of the authentication system according to the second embodiment.

Explanation of symbols

DESCRIPTION OF SYMBOLS 1, 1a Authentication system 10, 10a Car-mounted apparatus 11 Display part 12 BT communication part 13 Control part 13a PIN code generation part 13b Two-dimensional code generation part 13c PIN code reception part 13d Authentication part 14 Storage part 14a PIN code 14b Pairing information 20 20a Mobile terminal device 21 Imaging unit 22 BT communication unit 23 Control unit 23a Two-dimensional code reading unit 23b Download unit 23c Application execution unit 23d PIN code acquisition unit 23e PIN code transmission unit 30 Server device 31 Communication unit 32 Control unit 32a Download acceptance Unit 33 Storage unit 33a Communication application

Claims (6)

An authentication method for mutual authentication by exchanging an authentication key when connecting a communication device and a mobile terminal device by communication,
A generating step in which the communication device generates the authentication key;
A display step in which the communication device displays a two-dimensional code including the authentication key generated in the generation step on a display unit;
An acquisition step in which the portable terminal device acquires the authentication key from the two-dimensional code by reading the two-dimensional code via an imaging unit;
An authentication method comprising: a transmitting step in which the portable terminal device transmits the authentication key acquired in the authentication key acquiring step to the communication device. An authentication method for mutual authentication by exchanging an authentication key when connecting a communication device and a mobile terminal device by communication,
A generating step in which the communication device generates the authentication key;
A display step in which the communication device displays on the display unit a two-dimensional code including the authentication key generated by the generation step and a URL indicating a predetermined WEB page on the network;
An acquisition step in which the portable terminal device acquires the authentication key and the URL from the two-dimensional code by reading the two-dimensional code through an imaging unit;
A download step in which the portable terminal device downloads a communication program for communicating with the communication device from the WEB page associated with the URL;
An authentication method comprising: a transmission step in which the communication program downloaded to the portable terminal device by the download step transmits the authentication key to the communication device. The download process includes:
The mobile terminal device transmits the authentication key to the WEB page related to the URL, downloads a communication program in which the authentication key is set as a response,
The transmission step includes
The authentication method according to claim 2, wherein the communication program downloaded to the mobile terminal device transmits the authentication key set in the communication program to the communication device. The transmission step includes
The authentication key acquired by the acquisition step is set for the communication program downloaded to the mobile terminal device, and the communication program transmits the authentication key to the communication device. Authentication method described in. An authentication system that mutually authenticates by exchanging an authentication key when connecting a communication device and a mobile terminal device by communication,
The communication device
Generating means for generating the authentication key;
Display means for displaying a two-dimensional code including the authentication key generated by the generating means on a display unit;
The portable terminal device
Obtaining means for obtaining the authentication key from the two-dimensional code by reading the two-dimensional code via an imaging unit;
An authentication system comprising: a transmission unit that transmits the authentication key acquired by the acquisition unit to the communication device. An in-vehicle device that authenticates by exchanging an authentication key when connecting to a mobile terminal device by communication
Generating means for generating the authentication key;
An in-vehicle apparatus comprising: a display unit configured to display a two-dimensional code including the authentication key generated by the generating unit on a display unit.

Images